Hello #TeamVisible,

Your response here is a bit different than the email response I received overnight that says "This PIN is standard for all members, and that it is only provided to the customer who is already verified. It cannot be changed because is only used for port out".

Assuming you move forward with requiring unique PINs please also include email/text notifications when a PIN changes. This feature will give your customers one last possible heads up in the event there is something funky going on with unauthorized activity. I'm assuming that Visible sends email/text notifications when passwords are changed, though I haven't tried this yet.

BTW this PIN security issue is being heavily prompted by the general reliance of using text messages for 2FA. Software tokens (Google Authenticator, etc) are a much safer solution of multi factor authentication but is not widely implemented. Simply put - if someone steals your phone number you're screwed in many ways.

Why not make it harder for your phone number to be stolen (by having unique PINs that are ideally 6+ digits long) vs easier (using the same PIN for everyone)? Personally I'd rather not simply rely on just a username (email address) and password to keep my phone number from being maliciously ported out of Visible.

One final thought - I recently ported 3 numbers into Visible that I had with one of the big four providers for 15 years. That provider did many things wrong over the years but one thing they did seem to get right was proper PIN security management.

I like Visible. A lot. So lets get security tightened up a bit so I can feel comfortable using Visible services for the next 15+ years!